CVE-2026-120531

The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 10.47 . The root cause is insufficient input sanitization and output escaping related to the data[ip] parameter. This flaw allows unau...